$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/89e354ac-6b81-38a4-af68-dd79a9319721.roa File: 89e354ac-6b81-38a4-af68-dd79a9319721.roa (raw, json) Hash identifier: yw89ImgpKhZWnbKvNQYskfLHcYOHNJxfxF3Sgtk7a2c= Subject key identifier: 3A:F5:B7:64:F6:88:90:EF:21:68:CF:5B:BC:B5:73:C9:0D:4B:E3:F2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5AB9BB4B1D6F17524A54280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/89e354ac-6b81-38a4-af68-dd79a9319721.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 104.19.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:9b:b4:b1:d6:f1:75:24:a5:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=79d2095c-52cb-4c40-8693-f9fe3b5cc6e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:aa:a0:32:b8:b3:d5:97:82:93:15:e9:54:df: b5:04:2c:8b:3a:97:f0:2d:2f:3a:83:63:44:9c:18: fa:12:a9:fd:e0:ee:cb:f0:21:c9:5e:94:36:6c:a9: 55:77:73:f0:7a:81:55:8e:5d:27:b8:df:cc:f3:bb: 82:47:87:2e:26:dc:4c:b0:5f:0e:42:28:e4:ed:6c: 60:67:3b:51:f0:f1:8c:28:9e:18:22:53:5d:92:f0: de:a2:e3:1d:f2:9a:f2:d7:cb:45:da:c8:e1:6a:d9: c2:45:9b:17:ba:b2:d0:72:6e:f1:eb:91:65:5e:ce: 76:13:0a:83:86:d9:23:c1:32:be:ae:91:a0:7e:e9: 67:d2:dd:73:d1:ff:48:bf:38:65:6f:ca:ea:b5:f5: 63:10:96:29:4b:1f:86:8c:97:02:dc:0c:44:04:25: 7a:8e:e3:03:8e:6e:b9:ce:2e:a4:77:1f:18:60:fc: 08:65:d5:6e:fd:dd:84:fa:aa:6d:32:01:6c:86:41: 84:7f:61:97:d1:11:92:9c:09:c2:58:35:4d:e3:3f: 18:a7:4f:b6:3e:85:46:4a:e8:59:8d:1e:57:80:3c: b2:1c:2c:d4:6c:e5:23:b7:fc:af:ac:a8:dd:6a:43: 92:b4:e3:15:e5:af:07:4a:58:8a:18:5a:3b:04:5f: 0c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F5:B7:64:F6:88:90:EF:21:68:CF:5B:BC:B5:73:C9:0D:4B:E3:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/89e354ac-6b81-38a4-af68-dd79a9319721.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.19.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:05:c7:ff:54:66:86:a7:6d:e6:3a:f9:8e:ad:c1:62:0d:88: b1:39:65:15:f7:a8:20:33:1f:41:aa:22:44:61:1e:9e:58:43: 27:8d:9e:81:8e:85:8c:b1:03:df:0e:3d:01:cb:cd:bb:4f:ed: 2b:ac:81:1e:4e:b4:4a:bf:9f:6c:b0:d0:58:6b:4a:bc:dc:e3: cf:4b:87:a4:ae:58:1b:48:cd:9a:5d:08:b7:7a:3e:13:7c:b6: 42:42:b0:cf:f3:71:e2:98:53:39:29:01:3d:bc:c2:d6:90:41: 59:69:2b:09:4a:10:44:65:fd:6f:a3:6e:98:11:01:0d:f9:57: e8:92:1f:f8:81:2c:d0:d5:7b:a9:d7:34:55:ac:ca:b9:12:c2: e9:c5:9f:4e:92:b9:05:b5:c3:ef:19:15:de:c9:51:39:4a:39: 7c:97:7e:b7:36:39:7b:c2:24:ab:ea:8b:19:e8:c3:18:28:7a: 66:e9:69:af:49:4a:b4:34:b7:8b:8c:76:2f:85:3f:a0:0f:51: af:6c:54:b2:87:27:6d:08:da:e2:c1:fe:ed:ee:59:de:9c:09: a6:f7:58:ca:d8:73:2e:3b:2c:eb:13:a0:50:d0:05:0b:09:79: b5:ce:36:ea:e4:e7:ac:52:d0:36:6b:5b:d0:ea:c5:d1:9c:31: c5:1d:93:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq5u0sdbxdSSlQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk NzlkMjA5NWMtNTJjYi00YzQwLTg2OTMtZjlmZTNiNWNjNmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6qgMriz1ZeCkxXpVN+1BCyLOpfwLS86g2NE nBj6Eqn94O7L8CHJXpQ2bKlVd3PweoFVjl0nuN/M87uCR4cuJtxMsF8OQijk7Wxg ZztR8PGMKJ4YIlNdkvDeouMd8pry18tF2sjhatnCRZsXurLQcm7x65FlXs52EwqD htkjwTK+rpGgfuln0t1z0f9Ivzhlb8rqtfVjEJYpSx+GjJcC3AxEBCV6juMDjm65 zi6kdx8YYPwIZdVu/d2E+qptMgFshkGEf2GX0RGSnAnCWDVN4z8Yp0+2PoVGSuhZ jR5XgDyyHCzUbOUjt/yvrKjdakOStOMV5a8HSliKGFo7BF8MvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDr1t2T2iJDvIWjPW7y1c8kNS+PyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODllMzU0YWMtNmI4MS0z OGE0LWFmNjgtZGQ3OWE5MzE5NzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAFx/9UZoanbeY6+Y6twWINiLE5ZRX3qCAzH0GqIkRhHp5YQyeNnoGO hYyxA98OPQHLzbtP7SusgR5OtEq/n2yw0FhrSrzc489Lh6SuWBtIzZpdCLd6PhN8 tkJCsM/zceKYUzkpAT28wtaQQVlpKwlKEERl/W+jbpgRAQ35V+iSH/iBLNDVe6nX NFWsyrkSwunFn06SuQW1w+8ZFd7JUTlKOXyXfrc2OXvCJKvqixnowxgoembpaa9J SrQ0t4uMdi+FP6APUa9sVLKHJ20I2uLB/u3uWd6cCab3WMrYcy47LOsToFDQBQsJ ebXONurk56xS0DZrW9DqxdGcMcUdk5s= -----END CERTIFICATE-----Generated at Sun Aug 24 00:31:25 2025 by rpki-client